CVE-2026-25702

⚠️ high

Summary

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.

CVSS Score

7.3

High

EPSS Score

0.1

Exploit Probability

Published Date

2026-03-05

First Seen: 2026-03-06

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 56.1% of all 318,332 vulnerabilities in our database.

#139,772

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Mar 5, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

YES

Can be exploited automatically

💥 Technical Impact

Partial

Limited system impact

SSVC data provided by CISA

Last Modified 2026-03-09

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE IDs (Weakness Types)

CWE-284

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
suse	linux_enterprise_server	Affected	v12

🔗 References 1

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-2...

Broken Link

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2024-46951	⚠️ high	7.8	0.1	An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pa...	2024-11-10
CVE-2024-46953	⚠️ high	7.8	0.1	An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the f...	2024-11-10
CVE-2024-46955	🔶 medium	5.5	0.1	An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when readi...	2024-11-10
CVE-2024-46956	⚠️ high	7.8	0.2	An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforal...	2024-11-10
CVE-2023-29552	⚠️ high	7.5	93.0	The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services....	2023-04-25
CVE-2023-23005	🔶 medium	5.5	0.0	In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NUL...	2023-03-01

These CVEs affect the same products